CVE-2014-3387

Summary (CVE-2014-3387): The SunRPC Inspection Engine in Cisco ASA Software Vulnerable in listed release ranges (7.2 before 7.2(5.14), 8.x before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), 9.1 befor...

CVE-2014-3382

The CVE-2014-3382 entry corresponds to a DoS in Cisco ASA's SQLNET Inspection Engine. A remote attacker can trigger a device reload by sending crafted SQL REDIRECT packets, affecting ASA Software releases listed in the advisory (7.2–9.1 family with specific sub-versions). The vulnerability is tie...

CVE-2014-3387

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.25.14, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.3 allows remote attackers to cause a denial of service device reloa...

CVE-2014-3386

The CVE-2014-3386 entry concerns Cisco ASA Software, affecting the GPRS Tunneling Protocol (GTP) inspection engine. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service (device reload) by sending a crafted sequence of GTP packets (Bug ID CSCum56399). Affected ...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...

Multiple Vulnerabilities in Cisco ASA Software

2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...

[SECURITY] Fedora 21 Update: seamonkey-2.29.1-1.fc21

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

FreeBSD Security Advisory FreeBSD-SA-14:19.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:19.tcp Security Advisory The FreeBSD Project Topic: Denial of Service in TCP packet processing Category: core Module: inet Announced: 2014-09-16 Credits:...

JavaScript Code Evasion Attempt

Certain evasion tools can use JavaScript code in order to circumvent inspection by security software. An attacker could use such evasion methods in order to execute arbitrary code on the target...

CVE-2013-5567

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

Cisco Adaptive Security Appliance Software Filter and Inspect Overlap Denial of Service Vulnerability

A vulnerability in the inspection and filter features of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the affected system to reload. The vulnerability is due to an internal traffic loop condition that can be triggered when a received packet is...

HTTPS Inspection update for attending India CCA unauthorized digital certificates

...

Wireshark v1.10.8 - The world’s foremost network protocol analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

SchneiderWEB Server Directory Traversal Vulnerability

OVERVIEW Independent researcher Billy Rios has identified a directory traversal vulnerability in Schneider Electric’s SchneiderWEB, a web HMI. Schneider Electric has produced a firmware update that mitigates this vulnerability. Billy Rios has tested the update to validate that it resolves the...

[SECURITY] Fedora 20 Update: seamonkey-2.26.1-1.fc20

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 19 Update: seamonkey-2.26.1-1.fc19

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

siteengine 5.x Multiple Vulnerabilities

No description provided by source. SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $i...

NOKIA Siemens FlexiISN 3.1 - Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

Linux kernel 2.4 IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion

No description provided by source. source: http://www.securityfocus.com/bid/2602/info The Linux kernel includes a built-in firewall implementation called IPTables. IPTables supports stateful inspection of several application protocols, one of which is FTP. The inspection is used to facilitate...

PDF Containing Encrypted Data

PDF files may include encrypted data. A remote attacker may use such encrypted data inside PDF files to hide attacks against various PDF vulnerabilities, in order to evade IPS inspection. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it m...